
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: 4HS2RNvFUFj6eaFQ0yBsveBd2ppucpO1D9nquWytHFk=
Subject key identifier: 22:F3:5A:25:F5:B6:5C:EA:AC:2C:34:AD:47:1A:0F:AB:3B:60:93:C6
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 019748FA3F7ED747B40B62AFDA1A1F171B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 0859
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: pCAjKpERWwzrIA6ZAneSTvd965geNZijymygQeFnwyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3f:7e:d7:47:b4:0b:62:af:da:1a:1f:17:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=22f35a25f5b65ceaac2c34ad471a0fab3b6093c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:b0:a1:3f:7f:19:e3:35:69:00:ec:4f:54:
0f:1c:05:81:3f:5a:56:1d:00:f9:b6:0c:77:7b:0c:
fc:f2:52:e4:8c:13:aa:f8:14:08:37:74:20:77:f6:
cc:04:e6:6c:06:38:0e:df:f5:e3:b3:4a:88:3f:f2:
a7:bc:72:01:e9:d7:b8:61:97:3a:c2:20:4b:a9:7f:
c9:8f:7a:9b:35:3e:a0:3a:e7:8b:a2:f5:e2:d4:e0:
19:df:8e:45:73:cd:cb:08:27:fc:73:79:02:8f:e7:
fc:31:40:38:a8:60:f2:6d:bd:0c:8a:03:4f:23:56:
47:6a:64:6e:6f:85:b3:5b:ff:87:9c:9d:f7:19:de:
d5:2c:86:d8:0d:6b:8e:de:7e:e1:ef:9b:e0:fd:07:
c9:50:c7:4d:24:08:54:be:43:82:2f:5b:fb:3d:79:
b9:a2:e4:80:8f:43:32:17:82:87:84:d2:26:8b:ab:
99:4a:da:ef:25:68:44:e9:2e:f4:35:f6:c0:35:46:
2d:d6:77:6c:73:86:a9:29:ee:62:c9:3b:bd:08:dc:
42:6a:bd:6f:31:29:6a:73:76:8d:c9:b7:17:49:c6:
a6:d1:ea:03:e2:ba:3e:92:e5:d0:c0:35:f7:9a:d7:
2e:c1:92:79:08:b1:b3:e6:35:93:9d:69:3f:7a:e2:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:5A:25:F5:B6:5C:EA:AC:2C:34:AD:47:1A:0F:AB:3B:60:93:C6
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:02:f2:7c:d6:2b:59:26:7b:9c:b8:ee:6f:91:f6:22:f3:
23:f0:f4:9d:c2:2a:4a:70:13:d9:ef:4c:7e:e6:76:8b:90:24:
15:92:e1:10:7a:e5:9b:11:8e:49:be:e7:5f:1b:54:22:87:fd:
83:9a:8e:eb:2a:a3:f9:a9:f6:84:5a:c3:3c:b3:42:c2:66:d8:
67:57:f2:68:69:e3:e5:98:35:ba:50:93:86:c7:fd:c3:da:28:
94:27:2a:f2:78:ef:07:a7:af:82:f2:05:9b:53:b6:97:b2:16:
57:07:55:33:6c:0b:18:e7:ef:9e:e1:ad:4f:55:d4:dc:6f:a8:
58:83:84:f0:20:bd:77:d2:c4:cc:a4:53:d5:3a:c2:0a:50:55:
27:a0:9e:1f:1a:7b:24:fd:38:ff:4c:73:25:46:cf:a0:6e:92:
2c:5d:ad:d1:09:91:bb:58:76:de:85:bf:3b:02:30:7c:ad:19:
95:5e:81:85:ce:80:dd:69:8b:42:d0:63:66:0c:69:d7:07:67:
31:2e:f4:4d:df:b7:55:1e:b8:81:12:4d:2a:49:11:81:df:d1:
9a:2b:2a:2e:be:cd:bd:08:a8:33:8d:9f:ca:c2:45:22:f8:10:
b0:90:84:a6:e0:f2:a3:6f:db:42:6a:7e:7a:d9:3c:d9:31:aa:
5e:28:09:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+j9+10e0C2Kv2hofFxtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh
YjAwYWMwHhcNMjUwNjA3MDYwMDQ4WhcNMjUwNjA4MDYwMDQ4WjAzMTEwLwYDVQQD
EygyMmYzNWEyNWY1YjY1Y2VhYWMyYzM0YWQ0NzFhMGZhYjNiNjA5M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/6woT9/GeM1aQDsT1QPHAWBP1pW
HQD5tgx3ewz88lLkjBOq+BQIN3Qgd/bMBOZsBjgO3/Xjs0qIP/KnvHIB6de4YZc6
wiBLqX/Jj3qbNT6gOueLovXi1OAZ345Fc83LCCf8c3kCj+f8MUA4qGDybb0MigNP
I1ZHamRub4WzW/+HnJ33Gd7VLIbYDWuO3n7h75vg/QfJUMdNJAhUvkOCL1v7PXm5
ouSAj0MyF4KHhNImi6uZStrvJWhE6S70NfbANUYt1ndsc4apKe5iyTu9CNxCar1v
MSlqc3aNybcXScam0eoD4ro+kuXQwDX3mtcuwZJ5CLGz5jWTnWk/euK1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLzWiX1tlzqrCw0rUcaD6s7YJPGMB8GA1UdIwQY
MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct
OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3
LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodkC8nzW
K1kme5y47m+R9iLzI/D0ncIqSnAT2e9MfuZ2i5AkFZLhEHrlmxGOSb7nXxtUIof9
g5qO6yqj+an2hFrDPLNCwmbYZ1fyaGnj5Zg1ulCThsf9w9oolCcq8njvB6evgvIF
m1O2l7IWVwdVM2wLGOfvnuGtT1XU3G+oWIOE8CC9d9LEzKRT1TrCClBVJ6CeHxp7
JP04/0xzJUbPoG6SLF2t0QmRu1h23oW/OwIwfK0ZlV6Bhc6A3WmLQtBjZgxp1wdn
MS70Td+3VR64gRJNKkkRgd/RmisqLr7NvQioM42fysJFIvgQsJCEpuDyo2/bQmp+
etk82TGqXigJhA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:15 2025 by rpki-client